radusergroup needs a primary key too, else PgAdmin (rightly) refuses to work with it